
METHOD AND APPARATUS FOR SOFTWARE 
PROTECTION VIA MULTIPLE-ROIJTE EXECUTION 

CROSS-REFERENCE TO RELATED APPLICATIONS 
5 This application claims benefit of U.S. Provisional Patent Application No. 

60/449,911, entitled "SOFTWARE PROTECTION METHOD WITH MULTIPLE- 
ROUTE EXECUTION," by Laszlo Elteto, filed February 25, 2003, which application is 
hereby incorporated by reference herein. 

10 BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention relates to systems and methods for protecting software 
from unauthorized copying and/ or execution, and in particular to a system and method 
that protects software via multiple-route execution. 

15 

2. Description of the Related Art 

Software piracy is a long-standing problem for software developers. Many 
techniques for discouraging software privacy have been developed. Products are 
available for those who lack either the time or the specialized expertise to secure their 
20 software applications from unauthorized copying and/ or use (such products are 
available from RAINBOW TECHNOLOGIES, INC, the assignee of the present 
invention). Such products use software protection techniques that can be categorized 
into two forms: link-in object modules and shelling technology. 

Link- in modules require that the developer modify the software code to call 
25 specific functions that check for license conditions. Consequently, this technique is 
sometimes referred to as "manual" protection. 

Shelling does not require code changes, and is therefore easier for the software 
developer to implement. With the shelling technique, a shell process reads the 
application and produces a modified, new executable which contains an outer layer of 
30 protection code (with the original executable code usually encrypted inside). This method 
is often called "automatic" protection. 

The problem with shelling is that the software program is protected only by the 
outer layer of protection. Consequently, a hacker can gain access to the protected 
application "just" by cracking the outer layer of protection. Because this protection code 




executes before the original application code starts, it visually runs in a fixed, known 
pattern. A cracker can follow the code execution (for example, by running it under a 
debugger), and once the code execution sequence is understood, the cracker can modify 
the code (for example, by patching the executable) to bypass / disable license checking. 
5 What is needed is a software shelling technique that resists cracking. The present 

invention satisfies that need."^ 

Summary of the Invention 
To address the requirements described above, the present invention discloses a 

10 method, apparatus, article of manufacture for protecting a shelled computer program. 

In one embodiment, the startup code comprises a sequence of tasks, collectively 
executing a startup code, wherein one or more of the tasks is selectably performed by 
one of a plurality of task code variations as selected by a selection code associated with 
the task. In another embodiment, the startup code comprises a plurality N of startup 

15 code tasks T^, T2, ... ,Tn to be performed to execute the startup code; a plurality K of 
startup task code variations T^^i, ... , Tj ^ for at least one % of the plurality startup 
code tasks Ti, Tj, ... jT^; and a selection routine for the at least one T^ of the plurality 
of startup code tasks Tj, T2, ... ,Tn, the selection routine Sj for selecting at least one Tj^j of 
the K plurality of code variations X^^, X^29 ... , Tj^k from among the plurality of code 

20 variations Tj^j, Tj^, ... , X^^. 

The method comprises the steps of generating a plurality N of startup task 
routines Tj, Tj, ... ,Tn collectively forming the startup code; generating a pliuality K of 
startup task routine variations Ti 1, Tj 2, ... , Tj^ for a chosen startup task routine T^ of the 
startup task routines T^, T2, ... ,Tn; generating a selection routine Sj for the chosen startup 

25 task routine Tj of the startup task routines T^, T2, ... ,Tn, each selection routine Si for 
selecting at least one of the startup task code variations T; 1, Ti 2, ... , X- k to perform the 
chosen startup task routine X-; and assembling the secure startup code as a combination 
of the plurality of task routines T^, T2, ... ,Tn for the imchosen ones of the plurality of 
task routines, and the selection routine Sj and plurality of task routine variations T^, Ti^, 

30 ... , Ti^K for each of the chosen task routine T^ of the plurality task routines T^, T2, ... yX^. 

In another embodiment, the method comprises the steps of selecting a startup 
task code variation from among a plurality of startup task code variations, each startup 
code task variation performing a startup code task differendy than the other startup code 
task variations, the startup code task belonging to a sequence of startup code tasks 
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collectively performing the startup code; and executing the selected startup task code 
variation. 

The article of manufacture comprises a data storage device tangibly embodying 
instructions to perform the methods described above. 
5 The foregoing creates multiple execution paths within the startup code, thus 

requiring a cracker to step through the startup code a laige number of times to exercise 
each execution path so that the entire startup code can be characterized. Thus, the 
cracker must examine much more code and would have to disable multiple points of 
license checking. This greatly increases the time and effort that must be devoted to 
10 cracking the startup code, and will deter many crackers from tampering with protected 
programs. 



Brief Description of the Drawings 
Referring now to the drawings in which like reference numbers represent 
15 corresponding parts throughout: 

FIG. 1 is a block diagram showing an exemplary hardware environment for 
practicing the present invention; 

FIG. 2 is a diagram illustrating an exemplary shelling process used to protect a 
software application; and 
20 FIG. 3 is a diagram illustrating how a software application protected by the 

shelling process illustrated in FIG. 2 can be executed; 

FIGs. 4 is a diagram presenting exemplary method steps used to generate a 
multiple-execution path startup code; 

FIG. 5 is a diagram illustrating an exemplary unprotected startup code; 
25 FIG. 6 is a diagram illustrating the operation and structure of one embodiment of 

the multiple execution path startup code; 

FIG. 7 is a flow chart illustrating another embodiment of the present invention, 
in which single decision points implemented by selection routines are avoided; 

FIG. 8 is a diagram illustrating the structure of the protected startup code 
30 created, for example, by performing the technique shown in FIG. 7; and 

FIG, 9 is a flow chart illustrating the operation of one embodiment of the 
completed startup code. 
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Detailed Description of Preferred Embodiments 
In the following description, reference is made to the accompanying drawings 
which form a part hereof, and which is shown, byway of illvistration, several 
embodiments of the present invention. It is understood that other embodiments may be 
5 utilized and structural changes may be made without departing from the scope of the 
present invention. 

Hardware Environment 
FIG. 1 illustrates an exemplary computer system 100 that could be used to 
implement the present invention. The computer 102 comprises a processor 104 and a 

10 memory, such as random access memory (RAM) 106. The computer 102 is operatively 
coupled to a display 122, which presents images such as windows to the user on a 
graphical user interface 118B. The computer 102 maybe coupled to other devices, such 
as a keyboard 114, a mouse device 116, a printer, etc. Of course, those skilled in the art 
will recognize that any combination of the above components, or any number of 

15 different components, peripherals, and other devices, maybe used with the computer 
102. 

Generally, the computer 102 operates under control of an operating system 108 
stored in the memory 106, and interfaces with the user to accept inputs and commands 
and to present results through a graphical user interface (GUI) module 118A Although 

20 the GUI module 118 A is depicted as a separate module, the instmctions performing the 
GUI functions can be resident or distributed in the operating system 108, the computer 
program 1 10, or implemented with special purpose memory and processors. The 
computer 102 also implements a compiler 112 which allows an application program 110 
written in a programming language such as COBOL, C++, FORTRAN, or other 

25 language to be translated into processor 104 readable code. After completion, the 

application 110 accesses and manipulates data stored in the memory 106 of the computer 
102 using the relationships and logic that was generated using the compiler 112. The 
computer 102 also optionally comprises an external communication device such as a 
modem, satellite link, Ethernet card, or other device for communicating with other 

30 computers. 

In one embodiment, instmctions implementing the operating system 108, the 
computer program 110, and the compiler 112 are tangibly embodied in a computer- 
readable medium, e.g., data storage device 120, which coxild include one or more fixed or 
removable data storage devices, such as a zip drive, floppy disc drive 124, hard drive, 
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CD-ROM drive, tape drive, etc. Further, the operating system 108 and the computer 
program 110 are comprised of instmctions which, when read and executed by the 
computer 102, causes the computer 102 to perform the steps necessary to implement 
and/or use the present invention. Computer program 1 10 and/ or operating instructions 
5 may also be tangibly embodied in memory 106 and/ or data communications devices 130, 
thereby making a computer program product or article of manufacture according to the 
invention. As such, the temis "article of manufacture,** "program storage device" aiid 
"computer program product" as used herein are intended to encompass a computer 
program accessible from any computer readable device or media. 

10 In one embodiment, the computer system 100 includes removably coupleable a 

hardware security module (HSM) such as a dongle, or hardware key 140. The HSM 140 
is used to prevent unauthorized access to the computer 102 and/ or the application 
programs 1 10. This can be accomplished by one or more of a variety of software 
protection paradigms. These covild include, for example, a challenge- response protocol 

15 or other software protection techniques known in the art, including those disclosed in 
U.S. Patent Application 6,523,119, issued Febmary 18, 2003 to Pavlin et al, which 
application is hereby incorporated by reference herein. 

Those skilled in the art will recognize many modifications maybe made to this 
configuration without departing from the scope of the present invention. For example, 

20 those skilled in the art will recognize that any combination of the above components, or 
any number of different components, peripherals, and other devices, maybe used with 
the present invention. 

FIG. 2 is a diagram showing the generic shelling process. In the simplest form, a 
shelling process 206 accepts the original, unprotected executable file 202 and a startup 

25 code 204 and generates a new, protected executable file 208. An exemplary shelling 
process is described in chapter seven of "Sentinel SuperPro - Developer's Guide," 
published 2000-2001 by Rainbow Technologies Inc., which is also hereby incorporated 
by reference herein. The protected executable file 208 includes the startup code 210 and 
an encrypted version of the original executable code 212. 

30 FIG. 3 is a diagram illustrating the execution of the protected executable file 208. 

In block 302, the execution of the protected executable 208 is started 302. The startup 
code 210 is executed 304. The startup code 210 performs one or more operations to 
determine whether execution of the protected executable is authorized. In one 
embodiment, this includes checking for a valid license condition from the HSM 140, as 
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shown in block 306. If execution of the protected executable is not authorized (e.g. the 
HSM 140 is not present and/ or provides an incorrect response to the challenge provided 
by the computer 102), the execution of the protected application 208 stops, as shown in 
blocks 308 and 316. If execution of the protected executable is authorized (e.g. if the 
5 HSM 140 is present and provides the correct response to the challenge provided by the 
computer 102), the encrypted executable code 212 is decrypted to produce the original 
executable code 202, as shown in block 312. The original executable code 202 is then 
executed, as shown in block 314. For WIN3 2-compatible executables, other 
housekeeping operations are performed, as shown in block 310. Such operations can 
10 include, for example, relocating data link libraries (DLLs), and setting up import tables as 
required. 

FIG. 4 is a flow chart presenting illustrative method steps that can be used to 
practice one embodiment of the present invention. FIG. 4 will be described herein with 
reference to FIGs. 5 and 6. FIG. 5 is a diagram showing an exemplary embodiment of a 

15 startup code 204, As illustrated, the startup code comprises a plurality of sequentially 

executed tasks/ steps/ subtasks, such as a anti-debug code, self-decrypting routine, several 
substeps for checking license condition(s), decrypting the original code, preparing it to 
run (relocation, resolving import / esqjort tables). FIG. 6 is a diagram illustrating the 
stmcture of the protected startup code created, for example, by performing the method 

20 steps shown in FIG. 4. 

Referring to FIGs. 4, 5, and 6, a plurality N of startup task routines Tj , T2, ... 
502A-502N are generated, as shown in block 402. The plurality of startup task routines 
Ti , T2, ... Tn 502A-502N are generated collectively from the startup code 204. For 
example, the startup code 204 can comprise a series of sequentially executed task 

25 routines, as shown in FIG. 5. In this case, the startup code 204 can be separated into a 
first task routine T^ 504A which performs a first task, a second task routine T2 504B, 
which performs a second task sequentially performed after the first task, and a series of 
further task routines, up to and including an task routine Tj,j 504N. The code 
developer can now choose one or more task routines T^ , T2, ... Tjsj 502A-502N that are 

30 to be implemented with a variety of functionally equivalent but computationally differing 
startup task code variations. Such task routines are referred to hereinafter as the 
"chosen" startup tasks, while those startup tasks that are not chosen to be variably 
implemented are referred to as "unchosen" startup tasks. 
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Referring again to FIG. 4, a pliirality K of startup task routine variations T^^ are 
generated for a chosen startup task T- of the startup task routines Tj , T2, ... Tj,, 502A- 
502N. This is illustrated in block 404. An exemplary embodiment of the startup task 
routines Ti , Tj, ... 502A-502N and startup task routine variations 1, ... , T^^ are 
5 shown in FIG 6. In this example, K startup task variations 1 502AA, T 502AB, ... , 
502 AK are generated for startup task 502 A, K startup task variations Tj^i 502BA, 
T 2^ 502BB, ... , 502BK are generated for startup task % 502B, and K startup task 
variations T^^^ 502NA, T 502NB, ... , T^^ 502NK are generated for startup task Tn 
502N. Each of the startup task variations T^^i, Tp^^2 - perform the startup task 

10 but each does so using differendy designed code. Preferably, the differences in code 

variations Tj^ j, — are sufficient so that someone attempting to crack the startup 
code must crack each of the startup code variations to crack the startup code itself, and 
information gleaned from cracking one of the startup code variations is of litde or no use 
in cracking the remaining startup codes. These task code variations can be generated 

15 using the random code generation method described in U.S. Patent No. 6,463,538 

"Method of Software Protection Using a Random Code Generator", which is hereby 
incorporated by reference herein. 

Returning to FIG. 4, a selection routine S^ is generated for the chosen startup task 
routine Tj, as shown in block 406. Each selection routine S; selects at least one of the 

20 startup task code variations T^^ to perform the chosen startup task routine %. For 
example, supposing the selected startup task routine is Tj, selection routine Sj 602B 
selects one of the startup code task variations T2^, ... , T2^ 502BB-502BK. 

Finally, the secure startup code 210 is assembled as a combination of the plurality 
of task routines T^ 502 for the imchosen one ones of the plurality of task routines, the 

25 selection routines S^ 602, and the plurality of task code variations T^^ 502 associated 
with each of the chosen one of the task routines, as shown in block 408. 

An exemplary assemblage is shown in FIG. 6. In this embodiment, the startup 
code 204 has been separated into a plurality of task routines Tj, T2, ... Tjsj502A-502N, 
and a plurality of task code variations T^ j, ... , T^^ 502AA-502NK have been generated 

30 for each of the plurality of task routines Tj, T2, ... Tj^j 502A-502N. A selection routine Sj, 
S2, Sjsj 602A-602N has been generated for each generated task code variation T^ j, ... , 
Tfsjjc 502AA-502NK. These elements have been assembled so that each of the tasks 502 
are executed sequentially as they were in the original startup code shown in FIG. 5, and 
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the selection routines 602 select which of the task code variations Tj^j are used to execute 
each particular task. 

For example, a first execution thread can comprise the execution of selection 
code Si 602A, task code variation 2 502AB, selection code S2 602, task code variation 
5 502BK, selection routine Sn 602N, and task code variation T^,!- A second 

execution thread can include selection routine 602A, task code variation Tj 1 502AA, 
selection routine S2 602B, task code variation 502BB, selection code 602N, and 
task code variation T^^c 502NK. This process can continue, with each of the selection 
routines 602 selecting different task code variations T^^^ thus implementing the 

10 startup code 204 with randomly selected code. Such "random" selections are typically 
implemented by using an algorithmically- generated number. Although the numbers 
generated by such algorithms appear random, they are in fact reproducible, and therefore 
"pseudorandom" instead of truly "random." In this disclosure, the terms "random" and 
"pseudorandom" are functionally synonymous, and refer to selections that mayor may 

15 not be equally probable, and that are for practical purposes, random enough to achieve 
the objectives of the present invention. 

The number of task code variations Tj i-T^^ 502AA-502NK. that are generated 
for each subtask T^^ T2, ... , T^ 502A, 502B, ... , 502N is a sufficiendy large number so 
that a software cracker would be faced with a sufficiently large niunber of different task 

20 code variations 502 and different execution threads. The actual number selected depends 
upon the level of security desired. Typically, 50-100 task code variations T^ 502 AA- 
502NK are generated for each task code. 

As described above, all of the startup task routines T^^ T2, ... , T^ 502A, 502B, ... , 
502Ncan be implemented by the same number (K, in the foregoing example) of task 

25 code variations T^ ^-Tj^^ 502AA-502NK. However, if desired, a different number of 

startup task code variations T^j^ can be generated for one or more of the startup tasks T^ 
502. This adds another area of uncertainty, making it more difficult to crack the software 
code. Also, a particular startup task may be implemented with no variations (and hence, 
no selection routine is required to choose from among the startup code variations T^^. 

30 The selection routines S^ 602 may select from among the associated startup task code 
variations T^ in a variety of ways. In one embodiment, the selection routine S; 
pseudorandomly selects from among the associated startup code variations T^ (e.g. by 
generation of a random number). If desired, the probabilities of selecting any particular 
one(s) of the task code variations is much less likely than others of the task code 
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variations. This can make it quite difficult for the cracker to assure that each and every 
one of the task code variations have been cracked, making a cracked application much 
less marketable for purposes of software piracy. 

The startup code 204 may also include tasks that are performed in parallel instead 
5 of in series as shown in FIG. 5. In this situation, the related subtasks and associated 
selection routines may also be performed in parallel. 

In another embodiment, instead of randomly selecting the next T^ task variation 
at each point, task code variations are selected based on a fimction of time. For example, 
if the current time is t, the selection routine can use a selection function f(i,t) = x to 
10 select which of the task code variations - is selected. Using this technique, the selected 
sequence of task code variations will be Tj >' "»T^ . To increase resistance 

against cracking, some of the tasks perform a check, using the function /(/, t) and the 
knowledge of the current time r, to make sure that the proper task code variation T^^j was 
selected. If the proper task was not selected (for example, if the cracker compromised or 

15 bypassed one or more of the selection routines) the startup code will abort. 

In yet another embodiment, instead of randomly selecting the next task, one or 
more selection routines can select the task code variation based on the computer 
configuration (for example, using computer- related information such as CPU type, 
hardware configurations, and/ or other factors). To implement this embodiment the 

20 computer configuration information can be collected and condensed into a "computer 
fingerprint" or other value Fp . A computer fingerprint is a unique computer identifier, 

analogous to a human fingerprint. The computer signature represents a unique digital 
signature for the computer and is typically generated by a pseudorandomly processed 
combination of the computer's hardware components or resident software components. 
25 One or more of the selection routines can implement a selection function be 

g(h Fp ) = . The selection routine can implement the startup code by executing a 

thread ^^2,y2 * *'^N,yN • embodiment the selection routines S^, 83^, 

602A-602N of FIG. 6 and the selection routines Si, 802A and 83, 1 - S^^ 802BA-802NK 
can be performed by a single selection routine that enters the thread where appropriate 
30 to select the next task Tj 502 or task variation T^ 502 to be performed. In this case, on a 
given computer the protected program always runs the same way- so a cracker will patch 
only that one code path. When the cracked program is copied to another computer it will 
select a different code execution path and the crack will be ineffective, that is, the 
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protected program will again check for the license condition. Moreover, since the 
execution path is computer dependent the cracker would need to test a cracked software 
on many computers - and probably will still miss all execution thread or path variations. 
A combination of the foregoing techniques can also be employed. For example, 
5 some of the task code variation selections can be made completely randomly, others may 
be time- based (and the selected routine checks that it is the one it should have been 
selected) and some task code variations selections based on the computer configuration 
(so the execution path will change only if the program is run on a different computer). 
Further, how such task code selections are made in each instance can itself be 

10 determined pseudorandomly. 

FIG. 7 is a flow chart illustrating another embodiment of the present invention. 
In this embodiment, single decision points are avoided. Instead of employing a single 
selection routine Sj after a task T^.^, a plurality of selection routines is appended and 
performed after each associated task X^-. FIG. 8 is a diagram illustrating the structure of 

15 the protected startup code 204 created, for example, by performing the method steps 
shown in FIG. 7. 

Referring now to FIG. 7, a plurality of N startup task routines T^-T^ 502A-502N 

are generated. This is illustrated in block 702. The startup task routines Tj-T^ 502A- 

502N collectively form the startup code 204. A plurality K of startup task routine 
20 variations Tj^i, T^ 2> — » generated for one or more chosen startup task routines of 

the plurality of startup task routines T^-Tn 502A-502N. This is illustrated in block 704. 

In the embodiment illustrated in FIG. 8, K task code variations are generated for each of 

the startup task routines T^-T^ 502A-502N. 

In block 706, a selection routine Sj is generated for the chosen startup task 
25 routines % of the startup task routines T^-T^ 502A-502N. Each selection routine Sj 

selects at least one of the startup task code variations Tj^^ to perform the chosen startup 

task routine T^. 

In block 708, a plurality of K second selection routines Sj^^ j, S^^j 25 — 5 ^i+\;ti 
generated. Each of the K second selection routines Sj^i j, S^^j 2> — > ^i+ij^ ^ associated 
30 with and executed after one of the plurality startup code variations T^, T^^, ... , T^^. Also, 
each of the K second selection routines Sj+j j, S^+i 2> — > Sj+i^ selects at least one of a 
plurality L of second startup code variations Ti^.l 1, %+i^2> — > Tj^.^ l for a second startup 
task routine Tj+i of the plurality of startup task routines Tj-T^ 502A-502N. In the 
embodiment illustrated in FIG. 8, the number of second startup code variations Tj+j j, 
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%+i,29 > %+uL ^ equal to the number of second selection routines Sj+i Sj+i 2> — > ^i+i;^ 
(e.g. L = K), however, this need not be the case. 

Finally, in block 710, the secure startup code 204 is assembled as a combination 
of the plurality of task routines for the unchosen ones of the plurality of task routines Tj, 
5 T2, ... ,Tn, the selection routine S; and plurality of task routine variations T^^ 1, T^^ 2> — > \ l 
for each of the chosen ones of the task routines T^, T2, ... ,Tn, and the second selection 
routines Sj+j j, Sj+j 2> • • ^i+uK second startup code variations T^^j 1, %+i^2y — > 

FIG. 8 presents an exemplary embodiment of the assembled secure startup code 
204. In this example, the chosen startup task is task 502A, and selection routine Sj 

10 802A will select a startup task code variation Tj 1, 2, , T^^. The selected startup task 
code variation is executed, and the selection routine S- associated with the startup task 
code variation then selects one of the second startup code variations T^^ 1, X^^2y — > \ l 
to continue the thread. 

FIG. 9 is a flow chart illiastrating the execution of a startup code 204. Upon 

15 initial execution of the protected application, a startup code variation % ■ is selected from 
the plurality of startup code variations i-T^^ 502AA-5021SIK, as shown in block 902. 
As described above, the startup code tasks T2, ... , 502A, 502B, ... , 502N 
collectively perform the startup code 204, and each of the startup code task variations 
Ti 502AA-502NK performs an associated startup code task Tj, ... , 502 A, 

20 502B, ... , 502N differently than the other associated startup task code variations. 

For example, referring to FIG. 6, after the protected application is started, as 
shown in block 302, selection routine Si 602 A selects one of the associated task code 
variations j-Ti^ 502AA-502AK to perform task Tj 502A. The selected task code 
variation (e.g. for exemplary purposes, task code variation Tj 2 502 AB) is executed to 

25 perform task T^ 502A. In the embodiment shown in FIG. 6, this process is repeated for 
each remaining startup code task T2^ T3, ... , T^ 502B, 502Q ... , 502N. In cases where 
the multiple task code variations are available to perform the related task, a selection 
routine selects which task code variation will perform the task, and in cases where the 
task is performed by a single task code (e.g. the software designer has not chosen to 

30 implement multiple task code variations for this particular task), the task code itself is 
executed. 

Referring back to FIG. 9, a second selection routine (e.g. task S2 602B) selects one of 
among a second plurality second task code variations (e.g. task code variations Tj^i, Tj^, 
... , Tj^ 502BA-502BK to perform startup task % 502B, and the selected startup task 
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code variation (e.g. task code variation j 502BA) is executed to perform the task This 
is illustrated in blocks 906 and 908. 

FIG. 8 illustrates another embodiment of a startup code task 204. In this case, a 
first selection routine Sj 802A selects one of the startup task code variations j, 2> — j 
Tijc perform startup task Tj 502A, and a second selection routine (e.g. one of selection 
routines Sj ^, S22, , 802BA-802BK) selects one of the second startup code task 
variations (e.g. T2 1, T2^, ... , 502BA-502BK). The selected second startup code task 
executes the startup code task variation to execute the task 

In the embodiment shown in FIG. 6, the selection of the second startup code 
task variation is performed by executing a single selection routine S2 602B associated 
with each of the preceding startup code task variations T^ j, T12, ... , Tj^ 502AA-502AK 
and aU of the following second startup code task variations T2 1, T2 2, ... , T2^ 502BA- 
502BK. However, in the embodiment shown in FIG. 8, the selection of the second 
startup task code variation T2 j, T2 2, ... , T2^ 502BA-502BK is performed by executing a 
selection routine associated with the selected startup task code variation and the second 
startup task code variations (e.g., if selection routine 802A selected startup code task 
variation T^ 2, 502AB selection routine 802BB, which is associated with and executed 
after startup code task variation T^ 2 502AB selects one of the following startup code task 
variations Tj j, T2^, ... , Tj^ 502BA-502BK to perform task T2 502B). 

Conclusion 

This concludes the description of the preferred embodiments of the present 
invention. The foregoing description of the preferred embodiment of the invention has 
been presented for the purposes of illustration and description. It is not intended to be 
exhaustive or to limit the invention to the precise form disclosed. Many modifications 
and variations are possible in light of the above teaching. It is intended that the scope of 
the invention be limited not by this detailed description, but rather by the claims 
appended hereto. The above specification, examples and data provide a complete 
description of the manufacture and use of the composition of the invention. Since many 
embodiments of the invention can be made without departing from the spirit and scope 
of the invention, the invention resides in the claims hereinafter appended. 
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